Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
File:                     w7DVNe688o5grJiuSVs0mBtak-w.cer (raw, json)
Hash identifier:          ydtjmsxqz1VPeaMIRfdbaf/2bqH+6Xztpj9AAtPunns=
Subject key identifier:   C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C3B7E951C9964E05C8384A30F6281
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202125
                          IP: 45.13.8.0/22
                          IP: 185.50.204.0/22
                          IP: 185.247.164.0/22
                          IP: 188.119.104.0/22
                          IP: 193.43.74.0/23
                          IP: 193.43.98.0/23
                          IP: 2a01:ad20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:3b:7e:95:1c:99:64:e0:5c:83:84:a3:0f:62:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:1f:0a:f1:19:28:8f:df:fc:e5:14:43:a1:
                    af:26:da:b3:e8:f5:54:07:0f:8a:11:06:a6:c5:4d:
                    db:bc:38:9d:90:ff:4c:d6:e8:d1:cd:09:f8:10:51:
                    c8:c2:48:8f:51:e6:a0:cd:f3:6a:d2:4f:ee:46:40:
                    1e:67:6c:94:5e:d2:2c:3d:6d:05:13:c2:50:68:a2:
                    d2:60:8a:e5:83:d9:6c:b2:14:5d:98:cd:f7:52:3d:
                    88:48:5a:12:4f:70:3f:3d:43:71:f0:95:4a:ed:c2:
                    ea:6f:7e:3a:d4:23:5c:bb:97:b9:15:cd:ca:e7:06:
                    c1:c8:e0:dd:86:20:62:11:b4:a0:f2:f1:89:34:15:
                    ef:49:9e:8e:26:5e:94:b4:3e:cb:95:83:78:da:ea:
                    25:d2:f6:d4:7a:82:83:c9:01:1c:54:72:bf:9e:53:
                    a1:6a:9e:31:c7:10:e7:c1:20:85:60:04:5e:23:4d:
                    63:15:25:77:72:95:cd:46:8d:e8:df:93:9e:92:68:
                    04:23:ab:03:a0:a6:f9:80:2a:12:3b:f5:f9:7c:05:
                    77:75:0c:d4:12:d6:ab:58:60:fa:dd:1c:b5:74:35:
                    f6:87:16:66:1c:0d:48:18:86:7b:a4:69:bb:a9:51:
                    41:fc:6a:fe:a0:24:2b:c8:e7:c8:10:67:6e:81:ae:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.8.0/22
                  185.50.204.0/22
                  185.247.164.0/22
                  188.119.104.0/22
                  193.43.74.0/23
                  193.43.98.0/23
                IPv6:
                  2a01:ad20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202125

    Signature Algorithm: sha256WithRSAEncryption
         6b:9d:14:51:22:99:eb:cc:dc:99:d4:95:0b:3f:e4:09:91:ab:
         11:60:0c:86:92:72:da:67:7d:5c:2c:39:13:d7:47:f1:de:c7:
         79:8a:e6:95:1b:51:53:ee:6f:ef:c8:83:57:65:55:fb:56:e7:
         1c:55:59:e7:e0:8a:61:49:a5:29:96:66:79:7b:44:85:3a:1f:
         0d:fd:15:1e:6f:98:e7:bb:6c:5d:22:a8:b2:f3:24:83:fc:51:
         5e:4f:e3:63:89:75:a3:57:06:7f:33:24:fa:7b:a4:11:b3:3d:
         cd:a2:2f:43:9d:48:ff:29:84:94:f5:68:76:0b:e5:3f:36:4e:
         35:53:c8:d8:d9:a3:b1:fb:19:78:3a:f6:d8:29:f3:8f:91:cc:
         ca:09:6e:61:b0:d5:56:a2:1b:ea:95:ce:df:6f:ae:ab:f1:15:
         33:28:b9:0b:85:27:47:81:fe:48:f3:a6:c8:65:b1:c0:7f:88:
         db:e1:73:57:b0:1f:85:a4:a7:4f:a6:bd:5d:6d:2a:e1:3b:c6:
         d3:34:29:7a:35:4e:24:09:eb:5b:73:e2:c5:35:f2:fc:0e:4c:
         85:45:a8:4a:80:3f:2f:be:6a:7e:1b:6c:fa:03:aa:54:6c:05:
         5e:2b:03:a9:4d:13:09:2d:4f:da:26:b7:3d:71:48:6b:53:7b:
         b1:86:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:37 2025 by rpki-client